cakephp/cache

cakephp/cache 5.4.2 appears to be a healthy dependency: it has a long release history, a recent release, frequent releases over the last year, stable versioning, active repository maintenance, six active contributors in the last three months, and organization backing from CakePHP. The package is MIT-licensed, has no install-time lifecycle scripts, is not deprecated or archived, and its repository clearly matches the package. The main reservations are the absence of tests and a changelog in both the artifact and repository, no configured security-scanning tooling or security policy, and incomplete issue-activity data; these are transparency and process gaps rather than evidence of abandonment.

Latest 5.4.2

Packagist

89%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

A README is present, but neither the artifact nor repository contains tests or a changelog. This is a genuine documentation and verification gap, although the package is backed by an active repository.

Repo issue activity

There were no new or closed issues or pull requests in the last month, while issue totals are unavailable. This provides limited evidence about responsiveness and is a minor activity-data concern, not evidence of abandonment given the recent commits and releases.

Repo tooling

Composer build tooling is present, but no security-scanning tools are configured. The missing scanning is a process gap, though it is not by itself evidence that the package is unsafe or unmaintained.

Security policy

The repository has no security policy. This reduces disclosure transparency and is a modest governance gap, partially outweighed by the active organization-backed project.